Ditto Forensic FieldStation
Digital investigation, eDiscovery, data capture and analysis
Image, clone or browse SATA, IDE, USB, ethernet devices; write to LAN or 2 SATA targets
| Product name | Ditto Forensic FieldStation |
| Host (I/O) Ports | (1) IDE/PATA -- source side (1) USB 2.0 (3) eSATA -- one source, two destination -- up to 3 Gbps (2) Gigabit (1000Base-T) Ethernet -- one source, one destination/GUI access |
| Drive Types Supported |
|
| Sector Size Compatibility | Compatible with 512n drives as well as Advanced Format 4Kn and 512e type drives |
| SATA Speed | 3G |
| Supports S.M.A.R.T. disk info | Yes |
| Number of LEDs | 10 |
| Description of LEDs | Power in 5V/12V, USB, Source Network, IDE, eSATA, Expansion, HPA/DCO, Destination Network, eSATA A, eSATA B |
| LCD Screen | Four-line backlit LCD controlled with four soft-touch menu navigation buttons. Browser-based Ditto interface allows for direct operation, remote operation, and administration. |
| LCD Info | 4 lines x 24 characters width |
| LCD Backlight | Yes (backlighting can be disabled using stealth switch) |
| Stealth Mode | Disables all light output (LEDs/LCD). LCD readable with night-vision goggles. |
| Navigation menu | LCD/button driven menu system |
| Web admin interface | Operable from a web browser |
| Operating system compatibility | Windows XP or later Mac OS X 10.4.x or higher iOS Tablets/phones Android Tablets/phones Most versions of Linux |
| Browser compatibility | Internet Explorer Firefox Safari Chrome Opera |
| Detects/reports HPA/DCO | Yes |
| Allows HPA/DCO override | Temporarily or permanently remove HPA/DCO |
| Fan(s) | Fanless design |
| Construction material(s) | All-aluminum construction |
| Ambient humidity range | 5% to 95%, non-condensing |
| Power switch | 2 position: On / Off |
| Power input | 40W 12V 3.33A DC |
| Power input connector | Barrel connector (center pin positive) |
| SATA Power Input | Yes |
| Molex Power Input | Yes |
| Dimensions | 4.92" x 6.77" x 1.72" (125mm x 172mm x 43.7mm) |
| Weight | 5.00 lbs. (2.27 kg) |
| Write Blocking | Yes (source side) |
| Write Blocked ports | eSATA (SATA), PATA/IDE, USB 2.0; other input types and drive types supported with Ditto Expansion Modules or drive adapters |
| Hashing | Yes |
| Hashing info | None, MD5, SHA-1, MD5 + SHA-1. Hash types are hardware-accelerated; can hash during image or clone. |
| Erase modes | Clear Partition Table, Quick Erase, Custom Erase, Secure Erase Normal, Secure Erase Enhanced, DoD Clear, DoD Sanitize, NIST800-88 Clear, NIST800-88 Purge |
| Image/clone output modes | Single Drive Image, Single Drive Clone, Image and Clone, Image to mirrored disks, Clone to mirrored disks |
| Compliancy | FCC, CE, RoHS, C-Tick, RCM |
| Warranty | CRU provides a 3-year limited warranty for this product. |
| Technical Support | Your investment in CRU products is backed up by our free technical support for the lifetime of the product. If you need to contact us for any reason, visit wiebetech.com/support or call us at +1 (360) 816-1800. |
About Ditto Forensic FieldStation
 |
 |
Stay home, send Ditto: Save time and money.
The hand-held Ditto Forensic FieldStation travels with you or a technician for use in creating local, remote, or networked disk clones and images, including logical imaging of user-selectable lists of files and folders. Configure and manage via network or on the unit itself. The Ditto FieldStation also helps you log user activity and maintain your chain of custody while using forensic (write-blocked) methods.
Flexibility and speed via browser-based interface
An easy-to-use web browser interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of Ditto cloning and imaging operations. This time- and money-saving capability speeds time to data capture, as well as allows organizations to optimize staffing and deployment.
Create logical and physical images in the field
The built-in menu system makes it easy to configure and perform forensic captures without an attached computer. Optionally, attach a computer for additional options such as generating complete listings of drive or file system contents to facilitate discovery, or automatically capture specific file types using the following Logical Image Modes:
- Manual select
- All files and directories
- All files not part of a Windows OS
- All files not part of a Windows OS or application
- All files from the Windows Users directory
- All temporary files created by Windows
- All files except Swap and Hibernate
- All most commonly used media files
- All Microsoft Office files and PDFs
- All financial files
- User-customized profiles
Suspect Inputs (write-blocked)
Ditto natively supports many write-blocked inputs: SATA, eSATA, PATA, USB2.0. Additional acquisition interfaces are available via expansion modules, such as the Ditto USB 3.0 Expansion Module and Ditto SAS Expansion Module.
Destination Outputs
Use dual SATA outputs simultaneously with same performance as one eSATA (single, dual and mirrored). Images can also be output to large volumes, including NAS and other network destinations, as well as portable RAID enclosures.
Data Acquisition Modes
Clone, DD, E01, L01 with MD5 or SHA-1 hashing. Ditto also offers a combined mode that captures a clone and DD or E01 (to different destination drives) in a single pass reading of the suspect drive.
Complete and Secure Erasure
Ditto is capable of sanitizing drives with preset erase modes or a user configurable pattern.
Water-resistant, dust-proof Pelican® custom carrying case available
Convenient, customized field kits are available for Ditto and accessories.
| Model | Case Type | Description |
|---|---|---|
| Ditto Field Kit "D" | Pelican 1450 | This compact, rugged case features custom foam with slots for one Ditto, four expansion modules, plus accessories, with a little room left over for adding additional tools of your choice |
| Ditto Field Kit "K" | Pelican 1510 | Also known as "Quad Ditto Carrying Case," this rolling, dust-proof, water-resistant case features custom foam with slots for up to 4 Dittos, expansion modules, write-blockers, and accessories |
| Ditto Field Kit "L" | Soft side zipper case | This highly-portable kit includes slots for a Ditto, up to two pocket drives for target storage, a CD/DVD reader, accessories, and a Media WriteBlocker |
Free feature updates
Make sure you have the most current features by downloading the latest Ditto Firmware.
NOTE: The WiebeTech Ditto® Forensic FieldStation and its browser-based interface have been fully analyzed and verified to not be susceptible to either the Heartbleed bug or the Shellshock security hole.
Test drive a Ditto today
Take advantage of our unique ability to take control of an online demo unit!
- Corporate security, law enforcement, military applications
- Discover, preview, and image files from hard drives and network file systems
- Physical Imaging of complete hard drives
- Automatic Logical Imaging of specific file types from hard drives and network file systems
- Fully networked remote operation
- Free feature upgrades (Download the latest Ditto® firmware.)
- Rugged, all-metal, silent, and fan-free construction
- Free 3-year warranty and no annual fees
Included Items
- AC adapter & power cord
- (3) Unitized SAS/SATA-to-eSATA + MiniFit power cables
- IDE cable
- Legacy power cable
- Ethernet cable (RJ45)
- Legacy-to-SATA power adapter
- (2) eSATA cables
- (6) Velcro cable wraps
- SD card (pre-installed)
- Quick start guide
Frequently Asked Questions
Documentation and Downloads
Product Video
Ditto DX Forensic FieldStation
The Ditto® DX is a powerful, high performance drive imager and digital forensics device that's perfect for digital investigation, eDiscovery, and data capture and analysis.
Ditto Field Kit D
Our Forensic Field Kits come with a variety of write blockers, drive docks, or drive imagers to fit a digital investigator's needs. Each field kit offers a few standard configurations, but can be customized further. Forensic Field Kit D offers slots for a Ditto® drive imager, either four expansion modules or drive docks, and cabling.
Ditto Field Kit L
Our Forensic Field Kits come with a variety of write blockers, drive docks, or drive imagers to fit a digital investigator's needs. Each field kit offers a few standard configurations, but can be customized further. Forensic Field Kit L offers slots for a Ditto® or Ditto DX drive imager, a DVD/CD reader, and cabling. Travel is simple with this kit's soft-sided, lightweight case.
.png)
Ditto Field Kit K
Our Forensic Field Kits come with a variety of write blockers, drive docks, or drive imagers to fit a digital investigator's needs. Each field kit offers a few standard configurations, but can be customized further. Forensic Field Kit K offers slots for four Ditto® or Ditto DX drive imagers, either five expansion modules or drive docks, Ditto Breeze, and cabling. This kit also comes with wheels, a retractable handle, and a lid organizer for easier travel.
Ditto Network Tap Module
Quickly add network data capture to a Ditto® drive imager. With the NetTap Module, it's easy to capture network traffic, internet activity, and VOIP with your Ditto or Ditto DX.
Ditto SAS Expansion Module
Quickly add write blocked SAS support to a Ditto® or Ditto DX drive imager.
Ditto USB Expansion Module
Quickly add write blocked USB 3.0 to a Ditto® drive imager.
DVD/CD Reader for Ditto Forensic FieldStations
Add the DVD/CD Reader to a Ditto® drive imager to examine optical data discs.
Encryptor, AES256
The Encryptor, AES256 offers in-line SATA hard drive encryption. The military-grade hardware-base encryption is done in real-time and controlled with the unique physical encryptor key.
Ditto x86 BE
Ditto x86 SE
The Ditto x86 SE is a bootable USB version of the Ditto environment that lets you quickly image laptops and ultrabooks. Store images on the Ditto x86 SE's 2TB of space.
| Ditto Forensic FieldStation
Image, clone or browse SATA, IDE, USB, ethernet devices; write to LAN or 2 SATA targets |
|||||||||||||||||||
| US plug part #: 31700-2809-0000 |
$1549 Ships in: 1-2 Days |
||||||||||||||||||
| UK plug part #: 31701-2809-0000 |
$1549 Ships in: 3-5 Days |
||||||||||||||||||
| EU plug part #: 31702-2809-0000 |
$1549 Ships in: 3-5 Days |
||||||||||||||||||
| AU plug part #: 31703-2809-0000 |
$1549 Ships in: 3-5 Days |
||||||||||||||||||
| Ditto Field Kit D
Ditto Carrying Case (Pelican 1450); custom foam for Ditto & 4 exp. modules |
|||||||||||||||||||
| Kit D1: Ditto & accessories; US part #: 31310-2809-0061 |
$1699 Ships in: 1-2 Days |
||||||||||||||||||
| Kit D1: Ditto & accessories; UK part #: 31311-2809-0061 |
$1699 Ships in: 3-5 Days |
||||||||||||||||||
| Kit D1: Ditto & accessories; EU part #: 31312-2809-0061 |
$1699 Ships in: 3-5 Days |
||||||||||||||||||
| Kit D1: Ditto & accessories; AU part #: 31313-2809-0061 |
$1699 Ships in: 3-5 Days |
||||||||||||||||||
| Kit D2: Ditto, FUDv5.5, FCDv5.5, accessories; US part #: 31310-2809-0063 |
$2299 Ships in: 3-5 Days |
||||||||||||||||||
| Kit D2: Ditto, FUDv5.5, FCDv5.5, accessories; UK part #: 31311-2809-0063 |
$2299 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| Kit D2: Ditto, FUDv5.5, FCDv5.5, accessories; EU part #: 31312-2809-0063 |
$2299 Ships in: 3-5 Days |
||||||||||||||||||
| Ditto Field Kit K
Quad Ditto Carrying Case (Pelican 1510); custom foam for up to 4 Dittos + exp. modules |
|||||||||||||||||||
| Kit K0: empty part #: 31310-0000-0065 |
$279 Ships in: 3-5 Days |
||||||||||||||||||
| Kit K1: 1 Ditto; US part #: 31310-0000-0066 |
$1699 Ships in: 3-5 Days |
||||||||||||||||||
| Kit K1: 1 Ditto; UK plug part #: 31311-0000-0066 |
$1699 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| Kit K1: 1 Ditto; EU plug part #: 31312-0000-0066 |
$1699 Ships in: 3-5 Days |
||||||||||||||||||
| Kit K2: 2 Dittos; US part #: 31310-0000-0067 |
$3199 Ships in: 3-5 Days |
||||||||||||||||||
| Kit K2: 2 Dittos; UK part #: 31311-0000-0067 |
$3199 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| Kit K2: 2 Dittos; EU plugs part #: 31312-0000-0067 |
$3199 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| Kit K4: 4 Dittos; US part #: 31310-0000-0069 |
$6249 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| Kit K4: 4 Dittos; UK part #: 31311-0000-0069 |
$6249 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| Kit K4: 4 Dittos; EU plugs part #: 31312-0000-0069 |
$6249 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| Ditto Field Kit L0
Soft-side carrying case only; empty slots for a Ditto or Ditto DX, a DVD/CD reader, and accessories |
|||
| Black; Case only part #: 30030-0000-0031 |
$49 Ships in: 1-2 Days |
||
| Empty Ditto Carrying Case
Ditto Carrying Case (Pelican 1450); custom foam for 1 Ditto or Ditto DX & 4 exp. modules |
|||
| Kit D0: empty part #: 31310-0000-0060 |
$199 Ships in: 3-5 Days |
||
| Ditto Network Tap Module
Captures network traffic, internet activity, VOIP, etc. |
|||
| Compatible with Ditto or Ditto DX part #: 31030-1577-0000 |
$499 Ships in: 1-2 Days |
||
| USB Ditto Expansion Module
Add support for USB Drives to Ditto |
|||
| For USB 3.x storage devices part #: 31030-1589-0000 |
$99 Ships in: 1-2 Days |
||
| Ditto PCIe adapter bundle
Includes adapter for M.2 (PCIe/NVMe or SATA-based) SSDs, PCIe x16 slot adapter, & mSATA to SATA adapter |
|||
| For Ditto 1 part #: 30090-0000-0001 |
$65 Ships in: 3-5 Days |
||
| CD/DVD Reader for Ditto
Optical drive for reading CDs and DVDs using Ditto DX |
|||
| Bus powered with Ditto DX part #: 30000-0100-0000 |
$75 Ships in: 3-5 Days |
||
| Adapter Bundle #7
Includes 7 adapters compatible with v5/v5.5 docks, Drive eRazer Ultra, and Ditto |
|||
| 2.5in & 1.8in IDE, ZIF, mini PCIe, mSATA, MBA2010 part #: 31100-0000-0009 |
$344 Ships in: 3-5 Days |
||
| Ditto Protective Cover | |||
| Ditto Protective Cover - silicone glove for protecting a Ditto Forensic FieldStation when not in use part #: 3003-0000-06 |
$12 Ships in: 1-2 Days |
||
| Encryptor
AES 256-bit encryption adapter accessory; works with v5/v5.5 Docks or Ditto products to encrypt attached drives |
|||||||||||||||||||
| Encryption keys included part #: 31010-0430-0000 |
$120 Ships in: 3-5 Days |
||||||||||||||||||
| No encryption keys part #: 31010-0430-0001 |
$109 |
Call 1-360-816-1800 or email us for ordering information for this item | |||||||||||||||||
| Encryptor Cable Kit | |||
| Encryptor Cable Kit, includes cables for using Encryptor with various third-party products part #: 7100-3000-01 |
$25 Ships in: 3-5 Days |
||
| SATA cable | |||
| Data/power combo cable; eSATA + MiniFit; for Ditto, Drive eRazer Ultra, v5/v5.5 docks, or LabDock U5/S5 part #: 7381-0000-09 |
$11 Ships in: 1-2 Days |
||
| AC power adapter, model PWR-12
12V 3.3A 40W 100-240VAC; barrel connector 2.5x5.5 center positive; for Ditto |
|||||||||||||||||||
| US plug part #: 30010-0000-0012 |
$43 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| UK plug part #: 30011-0000-0012 |
$43 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| EU plug part #: 30012-0000-0012 |
$43 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| AU plug part #: 30013-0000-0012 |
$43 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| AC power adapter, model PWR-16
12V 5A 60W 100-240VAC; barrel connector 2.5x5.5 center positive; for Ditto or Ditto DX |
|||||||||||||||||||
| US power cord part #: 30010-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| UK power cord part #: 30011-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| EU power cord part #: 30012-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
| AUS power cord part #: 30013-0000-0016 |
$54 Call 1-360-816-1800 or email us for availability |
||||||||||||||||||
Need help? Talk with our sales team.
Interested in speaking to a WiebeTech representative about your needs? We’re here to help you find the forensic device that fits your requirements.